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Abstract: We relate the construction of a complete set of cyclic mutually unbi- 
ased bases, i. e., mutually unbiased bases generated by a single unitary operator, 
in power-of-two dimensions to the problem of finding a symmetric matrix over F2 
with an irreducible characteristic polynomial that has a given Fibonacci index. 
For dimensions of the form 2 2 we present a solution that shows an analogy to 
an open conjecture of Wiedemann in finite field theory. Finally, we discuss the 
equivalence of mutually unbiased bases. 



1. Introduction 

Mutually unbiased bases (MUBs) are used in various contexts in quantum infor- 
mation theory. The construction of MUBs is connected to the theory of finite 
fields and to construction problems of Latin squares [3] or of maximally 
commuting bases of orthogonal unitary matrices [3]. In this article we aim to 
construct complete sets of cyclic mutually unbiased bases [5,6 , which exist only 
for even prime-power dimensions [7|- We start with the definition of MUBs. 

Definition 1 (Mutually unbiased bases). 

Let T~L = C d be a d- dimensional complex Hilbert space. Two orthonormal bases 
B\ = • ■ ■ , IV'd)} and B2 = {\<Pi}, ■ ■ ■ , \4>d)} ofH are said to be mutually 

unbiased, if there holds \(ipi\<f>j)\ = d" 1 for all i, j e {1, . . . , d}. 

The standard examples for MUBs are the z-, x- and y-basis for d = 2 or any 
basis and its Fourier transform for any dimension d. It is well-known that the 
maximum number of pairwise mutually unbiased bases of C d , denoted N(d), is 
upper-bounded by d+ 1. If d is a prime power, then N(d) = d + 1 bases can be 
constructed by using methods from finite field theory. In any other dimension, 
the precise number N(d) is unknown. 
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A basis of T~L = C d can always be identified with a unitary matrix U on this 
space, since the columns of such matrix define an orthonormal basis and vice 
versa. Since U 2 , U 3 etc. are unitary, they also define bases of T-L. 

In the following, let N be the natural numbers and No := NU{0}. For a finite 
field of order q, we write ¥ q , for the complex field C, and for the n x n-matrices 
over an arbitrary field (or ring) K, we write M n (K). 

Definition 2 (Cyclic mutually unbiased bases). 

A set {Bo, . . . , B n -i} of mutually unbiased bases is called cyclic, if there exists 
a unitary matrix U € Ma(C) of finite order n€N, such that the columns of the 
matrices U, U 2 , U 3 , . . . , U n — U° — Id coincide with the bases {Bo, . . . , B n -i}- 

We are interested in complete sets of cyclic MUBs, i. e. sets of N(d) cyclic MUBs, 
and want to construct a unitary generator U. Since N(d) is known for prime 
powers only and it was shown that such operators cannot exist for odd d [7] , we 
shall only consider d — 2™ for some m £ N. (We will keep this notion of d and 
m throughout this article.) 

2. Methods and formalism 

In this section, we introduce the methods which are relevant for our treatment 
of cyclic MUBs. We will start with a subsection on Fibonacci polynomials and 
then relate the construction of cyclic MUBs to properties of a particular matrix. 



2.1. Fibonacci polynomials. Our analysis of complete sets of cyclic MUBs is 
closely related to the properties of the so-called Fibonacci polynomials^ 

Definition 3 (Fibonacci polynomials). 

Over an arbitrary field K, we define the Fibonacci polynomials (F n ) n ^ , by 
Fo(x) := 0, F\(x) := 1 and the recursion F n+ i(x) :— x ■ F n (x) + F n -i(x). 

If K = C, the sequence (F„(l))„ e N is the usual Fibonacci sequence. In the 
context of cyclic MUBs we exclusively deal with the ground field K = ¥2 and 
possibly its extensions and make use of a block matrix C = (f J) € Af 2m (F 2 ) 
with 1, G Af m (F 2 ) and some B € M m (F 2 ). The powers of C are easily seen to 
be of the form 

where the Fibonacci polynomials naturally appear. The Fibonacci numbers sat- 
isfy several well-known divisibility relations [8j pp. 67-69] and we will need their 
counterparts for Fibonacci polynomials over K = F 2 . We start with a definition. 

Definition 4 (Fibonacci index). 

The Fibonacci index (sometimes depth ) of an irreducible polynomial p € K[x] 
is defined as the minimum number d € N, such that p divides Fd- 

1 Note that these polynomials differ by one from the f n used previously |12| , i. e. F n = f n —i. 
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Several properties of these polynomials are discussed by Goldwasser et al. [SlfTU] ; 
for example, F n divides F m , if and only if n divides m for n, m £ N. In the proof 
of the following lemma [TU1 lem. 5/th. 7(a)], we use the fact that there holds 
F n _ t (x) + F n+t (x) = xF n (x)F t (x) over F 2 for n, t £ N and t < n lem. 4(2)]. 

Lemma 1 (Fibonacci polynomials and Fibonacci index). 

For every m £ N, the product i 7 2 m +i(^) ■ i*2 m — 1(2) is equal to the square of 
the product of all irreducible polynomials — except x — whose degree divides m. 
Therefore, the Fibonacci index of an irreducible polynomial p £ ¥2 [x] of degree m 
is well-defined and, for p(x) ^ x, is odd and divides either 2 m + 1 or 2 m — 1. 

Proof. We set n — 2 m + l and t — n—2 and use that (i) over any finite field ¥ q the 
product of all monic irreducible polynomials whose degree divide some m £ N 
is given by x qm - x [H th. 3.20], and (ii) F 2 m(x) = x 2 ™' 1 [H lem. A.3]. Note 
further that i<2™-i an d i ? a m +i a- re coprime [21 prop. 5]. □ 

The following lemma was proven by Sutner |13l th. 3.1]. 

Lemma 2 (Irreducible factors of F2^±i). 

Let p — Y^iLo aixl ^ ^ 2 i x ] be an irreducible polynomial of order m £ N. Then, p 
divides Fpn+i, if a\ = 1; otherwise it divides i^m-i. 



2.2. Finding a stabilizer matrix. Bandyopadhyay et al. [4] showed that the prob- 
lem of finding MUBs on C d can be reduced to finding certain partitions of oper- 
ator bases of Md(C) (cf. also the appendix). The problem of constructing cyclic 
MUBs can accordingly be reduced to finding a suitable symplectic stabilizer ma- 
trix C £ M2m{^2), where d = 2 m |12j . Numerically, it was shown that, at least 
for m < 24, this matrix may be chosen of the form 

C= (l l m )^ M ^2) (2) 

with B £ M m (¥2), which we may call reduced stabilizer matrix, and we will see in 
this article that this form can be maintained for all m £ N. (We summarize the 
explicit construction of the generating unitary U from such B in the appendix.) 
Using the Fibonacci polynomials, we demand that C d+1 = 1.2m, i- e. 

n d+i _ ( Fd+2{B) F d+1 (B)\ _ f t m m \ 

- \F d+1 {B) F d {B) ) ' [0 m l m ) ■ W 

We thus require F d (B) — l m and F d+ i(B) = m . By the recursion relation, the 
condition F d+ 2(B) — l m is automatically fulfilled. The conditions on B are the 
following [12] : 

(i) B is symmetric, i. e. B — B l , 

(ii) F k (B) is invertible for k £ {1, . . . , d}, 

(iii) F d {B) =B d - l = t m . 



Since the minimal polynomial of a matrix B is the normalized polynomial of 
minimal degree that annihilates B, we see that it is a factor of F d+ \. 
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Lemma 3 (Characteristic polynomial of reduced stabilizer matrices). 

A matrix B £ M m (F2), m £ N, that is at first annihilated by F2 m -i or i^+i, 
has an irreducible characteristic polynomial. The characteristic polynomial thus 
coincides with the minimal polynomial of B. 

Proof. If the first Fibonacci polynomial that annihilates B equals i^iij B is 
annihilated by a polynomial p with Fibonacci index 2 m ± 1 that has degree m 
and is therefore irreducible. Since the degree of p coincides with the dimension 
of i?, it is the irreducible characteristic polynomial of B. □ 

Lemma 4 (Multiplicative order of B). 

If the characteristic polynomial of B has Fibonacci index d+1, then Fd(B) = t m . 

Proof. By lemma [3J xb is irreducible and its splitting field over F2 is isomorphic 
to F<i with d = 2 m . By the Hamilton- Cay ley theorem, B is a root of xb and thus, 
as an element of the multiplicative group of a finite field of order d, there holds 
B 4 ' 1 = t m . The assertion now follows from F d {B) = B d ~ x [H lem. A.3]. □ 

Proposition 1 (Representation of fields). 

Let L/K be a field extension of order n £ N and let A £ M n (K) be a matrix, 
such that its characteristic polynomial xa S K[x] is irreducible (and therefore 
minimal). Then, the set {f(A)\ f £ ^[a^]} is isomorphic to the extension field L. 

Note that the set of polynomials in A effectively includes only polynomials of 
degree less than n; it also includes the zero polynomial with degree —00. 

Proof. By the Hamilton-Cayley theorem, there holds xa(A) = as matrix equal- 
ity, i. e. A is a root of the irreducible polynomial x- By adjoining A to the field 
K, we obtain the extension L [TTJ p. 66 ff.]. □ 

With the help of this proposition and lemma 2] we can replace conditions (ii) 
and (iii) on B from above by 

(ii') The Fibonacci index of the characteristic polynomial xb of B is d + 1. 

The following theorem shows that for every dimension d — 2 m we can find a 
reduced stabilizer matrix B and thus a unitary generator U of a complete set of 
cyclic MUBs. 

Theorem 1 (Existence of reduced stabilizer matrices). 

For any dimension d — 2™ with m £ N there exists a reduced stabilizer matrix 
B £ M m (¥2) that fulfills conditions (i) and (ii'). 

Proof. We have to find a symmetric matrix B £ M m (¥2) with irreducible char- 
acteristic polynomial and Fibonacci index It is known that the number of 
polynomials in F2[ir] with degree m and Fibonacci index d+ 1 is given by ^r^p-, 
where cf> is Euler's totient function \10\ th. 8]. Since this expression is non-zero, 
there exists at least one polynomial for any dimension d — 2 m that has maximal 
Fibonacci index d+1. 

It is well-known that any polynomial p £ K[x] possesses a companion matrix, 
whose characteristic polynomial is p. For every monic polynomial over a finite 
field K = F q there exists a symmetric matrix that is similar to the companion 
matrix and therefore has the same characteristic polynomial [T3J lem. 2]. □ 
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3. Explicit construction of the reduced stabilizer matrix for m = 2 k 

In this section, we deal with a specific solution of B for m = 2 k and k £ N. 
We start by presenting an iterated construction of B, which is followed by a 
discussion on the characteristic polynomial and its Fibonacci index. We show 
that this construction is related to an open conjecture in finite field theory by 
Wiedemann [15] (cf. also [T6] prob. 28]), that is still of current interest [17] . 

Let us recall some already known solutions [12]: For k = 1 there exist two 
different forms of B (by permutation), one of them being B% = ({ J) £ M 2 (¥2)- 
If we set k = 2 a possible choice of B is the block matrix B4 = J) <E M4CF2). 
By iterating this construction, we get a recursion 



and we shall show that it is suitable for our purposes. 



3.1. Irreducible self-reciprocal polynomials and the characteristic polynomial of 
B 2 k . In this subsection we want to evaluate the characteristic polynomials of 
the matrices B 2 k of (J4j) . It will turn out that the notion of reciprocal and self- 
reciprocal polynomials are of interest in the context of determining \b- 

Definition 5 (Reciprocal polynomial). 

The reciprocal of a polynomial f £ K[x] is defined by f*(x) :— x n f(x^ 1 ), where 
n £ N is the degree of f . If f = f* , it is called self-reciprocal. 

By applying the reciprocal operator Q on an arbitrary polynomial / of degree n, 
we get a self-reciprocal polynomial as 



Varshamov and Garakov [TH] have shown, that in the case of / £ ¥2[x] and / 
being irreducible, again is irreducible if and only if the linear coefficient of / 
does not vanish; see also Meyn [TH]. We can now relate the notion of reciprocal 
polynomials to our construction from Q. 

Lemma 5 (Characteristic polynomials). 

Let K be a finite field of characteristic 2 and S £ M n (K) with characteristic poly- 
nomial Xs- The characteristic polynomial of the matrix S' :— (f J) £ M 2n {K) 
is given by xs> = (xs) Q ■ 

In the following proof, we use the well-known fact that for block matrices there 
holds det (£ B D ) = det(D) det(A - BD^C), if D is invertible, which follows from 

the decomposition d) = (0 d) ( a 0-^0° °)) because the determinant of block- 
triangular matrices is the product of the determinants of the blocks. 

Proof. We calculate XS'{ X ) = dct(irl2ri — S') — det s j 1 !™ ) which yields 
XS'{x) = det(xl„) det(xl„ — S — x^ 1 !^ = x n ■ xs( x ~ x~ 1 ). Since char if = 2, 
this is the reciprocal of \s- d 






(5) 
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Given an arbitrary polynomial of degree n, f(x) = X)fc=o a kX k , after some easy 

calculations we find f®(x) = X)fe=o Si=o Ci) a k xn+k ~ 21 ■ A contribution to the 
linear coefficient arises only from k = i = n — 1, so that it is given by a„_i. A 
corollary thereof is the following. 

Corollary 1 (Minimal polynomial of B 2 k). 

The characteristic polynomial of B 2 k € M 2 k(F 2 ) as in k € N, is given by 
(x) with f(x) = 1 + x. Therefore it is irreducible and minimal. 

Proof. By induction, the first part follows immediately from lemma[SJ According 
to Varshamov-Garakov, all polynomials are irreducible, provided that the linear 
coefficient does not vanish. This is guaranteed by the statements preceding this 
corollary. □ 

This corollary implies that every Fi(B 2 k) is either invertiblc or zero, since by 
proposition [T] it is a representative of an element of some finite field. However, 
we do not yet know anything about the Fibonacci index of the characteristic 
polynomial of B 2 k , but we shall relate it to an open conjecture in finite field 
theory in the following subsection. 



3.2. Fibonacci index of xb and Wiedemann's conjecture. Wiedemann |15j con- 
sidered iterated quadratic extensions of F2 using generators Xj+\ + xj +1 = Xj 

for j € No and xq + x^ 1 = 1; these extensions read E := F 2 (a;o), E\ := Eq{x\) 
etc., where E n is isomorphic to F 22 »+i. He then showed that the order of x n 
divides the n-th Fermat number J- n = 2 2 +1. Since the Fermat numbers are 
mutually coprime, the order of g E n is the product of the orders 

of the Xi. If the order of each X4 is J~i for i < n, then x is primitive in E n , i. e. 
a generator of the multiplicative group of E n . This is Wiedemann's conjecture, 
which is verified numerically for n < 8 [15, p. 291/295]. It turns out that our 
matrices C 2 fc can be seen as a realization of the Xk ■ 

Theorem 2 (Wiedemann analogy). 

Wiedemann's conjecture is true, if and only if the characteristic polynomial of 
every B 2 k as in ((4]) has Fibonacci index 2 2 + I . 

Proof. Let C 2 k be the stabilizer matrix as in ^ using the construction of B 2 k 

from Obviously, there holds C 2 o+C^ = l.Now, ifC 2 fc is of order 2 2 * +1, the 

characteristic polynomial of B 2 k has Fibonacci index 2 2 +1. The characteristic 
polynomial of C 2 k over the field generated by B 2 k — C 2 k-i is then given by 
x 2 + C 2 k-ix + 1. Identifying C 2 k with Wiedemann's Xk, the C 2 k are the roots of 
these polynomials, which are equivalent to those in Wiedemann's construction. 
Thus, our problem is an instance of his conjecture. □ 

We have thus shown that we are able to construct a reduced stabilizer matrix B, 
out of which we can construct a unitary operator U which generates a complete 
set of cyclic MUBs. In the appendix, we show that this operator can be written 
in the form U = e"^7J® m P with some global phase e 1 ^ and explicitly construct 
the diagonal phase system P from B (see also |12|). 
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4. Equivalence of sets of mutually unbiased bases 

In this section we shall discuss the equivalence of sets of mutually unbiased bases. 
At first, we will introduce methods which are related to those of Calderbank et 
al. [20], Theorem 5.6 and Proposition 5.11; see also Kantor [21], Theorem 2.3. 
Our presentation is self-contained and stated in the language of operators etc. 
rather than in terms of discrete geometry. We start with the usual definition of 
equivalence of MUBs. 

We shall identify a basis of the Hilbert space T-L = C d with a unitary matrix B 
consisting of the basis vectors as columns and consider two sets of mutually 
unbiased bases, 6 = {B\, . . . , B r } and & = {B[, . . . , B' r }; in our case, r = d+ 1. 

Definition 6 (Equivalence of mutually unbiased bases). 

We say, the sets & and &' are equivalent, if there exists a unitary opera- 
tor U on H, a permutation ir on {1, . . . , r} and monomial matrice^ Wk, k G 
{1, . . . , r}, such that there holds B' k = UB^(k)Wk for all k G {1, . . . , r}. 

The essential transformation is the unitary U; the matrices Wk take care for the 
fact that for MUBs we are more interested in a set of one-dimensional subspaces 
than in bases as ordered sets and tt represents the fact that we consider unordered 
sets of bases. 

As outlined in the appendix (for details cf. refs. [4lll2p. our MUBs appear 
as eigenbases of operators, i. e. £ = {Ci, . . . , Cd+i}, where each class Ck consists 
of d — 1 commuting Pauli operators. Therefore, Ck = {XZ(v±), . . . , XZ(vd+i)}. 
We can now reformulate equivalence in a way that the order of the basis vectors 
and their total phase — as in the Wk — do not appear. 

Lemma 6 (Equivalence of mutually unbiased bases). 

The MUBs characterized by C = {Ci, . . . , Cd+i} and <£' — {C[, . . . , C' d+1 } are 
equivalent, if and only if there exists a unitary U on C d and a permutation tt 
on {1, . . . , d + 1}, such that C' k = UC^^U^ , where U acts simultaneously on all 
operators within a class Ck- 

Proof. Assume that the eigensystems of £ and are equivalent MUBs. As 
the ordering within a basis does not appear here, the Wk are irrelevant, and 
the unitary U is the same as in the definition of equivalence, since Uv is an 
eigenvector of UAU\ if and only if v is one of A. □ 

As we assume £ and £' to consist of Pauli operators only, the conjugation by U 
must map Pauli operators onto Pauli operators, i. e. U belongs to the Clifford 
group. We can view the Pauli operators — essentially the Pauli group factorized 
by its center {±1, ±i} 1 — as a projective representation of the symplectic space 
Vs ■— F™ x F™, and the unitary U thus corresponds to an invertible linear 
mapping / on Vs, i.e. / € M2 m {^2)- In order to preserve the commutation 
relations, we require / to be symplectic. 

In general, the classes Ck with d — 1 = 2 m — 1 elements are generated by 
m elements. In terms of Vs we have m vectors which generate a subspace of 
Vs with d — 1 nonzero elements. Viewing a class Ck as a 2m x (d — l)-matrix, 

2 A matrix W is called monomial, if W = DTI, where D = diag(Ai, . . . , A,;) is diagonal and 
II a permutation; we assume |Aj| = 1, i. e. W is unitary. 
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where the columns represent the Pauli operators (as in the appendix) , we find a 
(non- unique) generator Gk, which is a 2m x m-matrix, and write (Gk) = Ck- As 
we can permute the columns within the Ck by a permutation Qk, we find that £ 
and £' are equivalent, if and only if there exists a mapping / and a permutation 
7r on {0, . . . , d}, such that (G' k ) — j '(G^^Qk for all k. 

We can assume that the matrix representation of / is of the block-matrix 
form f* t); symplecticity is equivalent to the three conditions, that s t u and t l v 
are symmetric and v i s — t l u = l m . Since in cyclic MUBs, we can rotate through 
the bases, we can choose 7r(0) = 0, such that (Go) = (G' Q ) consists of all Z-type 
Pauli operators with the standard basis as their eigenbasis. This implies u = 
and, to keep symplecticity, that v — (s*) . 

The elements within a class Ck are given by |12) , i. e. 



The generators of the classes Ck can be grouped into the generator of the Z- 
type Pauli operators Go = (l m ,0 m ) 4 and the remaining generators Gk = C k ■ 
(l m , m )' with k G {1, . . . , d}, which can be written as Gk — (Fk+i(B), Fk{B)) 1 
with the reduced stabilizer matrix B. For a complete set of MUBs, the generators 
Gk are constructed in a way, that for k € {!,... ,d] the polynomial Fk(B) is 
non-zero and invertible (cf. prop.[l]). Since any invertible operator that acts in ([6]) 
on the elements c, is given by a permutation of those elements, we will produce 
the same classes Ck , if we replace Gk for fee {1 , . . . , d} by 



with pk(B) = F k+1 {B) ■ F k 1 (B). We call this the standard fo rm, which fits into 
the construction of |4]. As B is a root of its minimal polynomial with degree m, 
the 2 m different elements Pk{B) represent the extension field F™, i. e., the pk are 
all 2 m polynomials over F2 with degree less than m. 

By expressing the generators of a set of MUBs in the standard form we avoid 
the use of permutations Qk- Using the standard form, we can show to be free in 
the explicit choice of the symmetric matrix B for a given irreducible polynomial. 

Lemma 7 (Equivalent sets of MUBs in certain cases). 

All symmetric matrices B £ M m {¥2) with the same irreducible characteristic 
polynomial p generate equivalent sets of MUBs. 

Proof. Consider two symmetric matrices B and B' with characteristic polyno- 
mial p. We can find some orthogonal matrix s S M m (F2) (i.e. s* = s _1 ), such 
that B' = sBs 1 (orthogonal similarity). The matrix / = („ °) applied on the 
standard form (pk(B), 1)* of eq. © results in (spk{B) 7 s)* which in the stan- 
dard form reads (spk(B) s*, 1)* = (pk(B'), 1)' showing equivalence in this case. 

□ 



C fc = {G fc -(l m ,0 m ) t -c:ceF 2 ™}. 



(G) 




(7) 



Using this lemma, we can relate even more sets, i. e. all sets which can be written 
in the standard form of eq. ([7]) with polynomials pk and some symmetric matrix 
B. 
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Theorem 3 (Equivalent sets of MUBs). 

All complete sets of MUBs which are eigenbases of classes £ = {Co, . . . , C c i} 
generated by Gq — (l m ,0 m )* and Gk = {pk{B), l m )* for fee {1, . . . ,d}, some 
symmetric matrix B £ M m (W2) and pk being all d — 2 m polynomials over F 2 
with degree less then m are equivalent. 

Proof. Let p and p' be two different irreducibie poiynomials of degree m over 
the ground field F2 with roots ft and ft', respectively. By adjunction of ft to 
F 2 we generate the field F 2 (/3) = F 2 [x]/pF 2 [x] = F 2 ™. The same holds true 
for the adjunction of ft' in a similar fashion. Since both extensions are Galois 
extensions (cf. [351 chap. 4.1]), the elements in ¥ 2 (ft) and F 2 (/3') are equivalent 
up to permutation. If we represent ft as a symmetric matrix B € M m (F 2 ), such 
that the minimal polynomial of B equals the minimal polynomial of ft, we are 
free in the explicit choice of B as seen in lemma [3 □ 

As mentioned in [4, chap. 4.1], the choice of a basis to produce the elements 
Pk{B) implies a field structure and generates the MUBs of Wootters and Fields 
PP. By theorem [3] they are equivalent to the construction given here, and by [23j 
they are also equivalent to the bases which were generated by Klappenecker and 
Rotteler [2] and by Bandyopadhyay et al. [I]. Thus, many of the known MUBs 
can be constructed with cyclic structure, which yields to a short description and 
allows a simple implementation in experiments like the quantum circuit given in 

5. Conclusions 

In this paper we have shown how to relate the problem of constructing unitary 
generators of cyclic mutually unbiased bases to Fibonacci polynomials and their 
properties. In particular, we have shown that the problem for d — 2 m can be 
reduced to finding a symmetric matrix with irreducible characteristic polynomial 
of degree m with non-zero linear coefficient, which is known to exist. If m itself 
is of the form m = 2 fc , we give an explicit construction of such matrix, provided 
Wiedemann's conjecture is true. We have proven that all complete sets of cyclic 
mutually unbiased bases our scheme provides, are equivalent and belong to the 
same class as the mutually unbiased bases by Wootters and Fields. The methods 
of this work are used in another article [24], where we give a simple direct 
construction of the unitary generator U, which can be applied without reference 
to finite field theory and show how this can be translated into a quantum circuit, 
which may be useful in experiments. 

A. Construction of the MUB-generating unitary operator 

In this appendix we will review and slightly reformulate the construction of the 
unitary matrix U € Md(C) from C <E M 2m (F 2 ) or B <E M m (F 2 ), respectively, up 
to a global phase e 1 ^ [T2] . 

On the Hilbert space H = C p , p € N prime, with canonical orthonormal basis 
{\i)\i & F p }, we define 



X|i):=|i + 1) and Z\i) := 



(8) 
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withwp := exp(27ri/p). For a := {a z \a x ) 1 G ¥ 2 p m with a v = (af \ . . . , aZ'f G F™ 
and v G {z, x} we define the set of Pauli operators (which is not the Pauli group!) 
by P™ := {XZ(a)\ a G ¥ 2 p m } with 

XZ(a) := /(a) • X a i X> Z a ^' ® . . . <g) X a ™ ] Z a ™ , (9) 

where f(a) := i a i )q i )h ha ™ >a ™ > ) if p = 2, and f(a) = 1 otherwise. This implies 
f{a)- l f{b)- 1 XZ{a)XZ(b) = uj%* b * + - +a ™ b ™ f( a + b)- x XZ{a + b), and it 
follows XZ(a)XZ(b) = u) { p a ' b)sp XZ(b)XZ(a), where ( • , • ) Bp : F^ ro x F 2 " 1 -> F p 

with (a, 6) sp := Sk—j^l^ bjj. — a ^^k^ denotes the symplectic product. 

Consider the vectors z i} Xi G ¥ p m , i G {0, . . ,,m— 1}, where the i-th com- 
ponent of the first resp. second half of the vector is one and all other entries 
vanish. These vectors form a symplectic (or hyperbolic) basis of F 2 /™, i.e. for all 
i, j G {l,...,p— 1} there hold the equations (xi,Xj) sp — (zi,Zj) sp — and 
(xi,Zj) sp = Sij. For a matrix C G M 2m (F p ) the images v\ := Ci/, f G {z, x}, 
form a symplectic basis, if and only if C is a symplectic matrix, i. e. C SC = S 
for 5 = (_°r m J") GM 2m (F p ). 

For any symplectic basis, we can define logical operators by Xi := XZ(Cxi) 
and Zi := XZ(Czi) for C as above. By definition, the logical state \0}l is the 
joint eigenstate of all Zi with eigenvalue +1, and we get the other logical states 
by \j) L = Xi 1 ® ... ® X J 1 m |0) L for j = (ji, j m )' G F™. If we choose the 
block matrix form C = ( t B m J") G M 2m (F 2 ) with B G M m (F 2 ), the matrix C is 
symplectic, if and only if B is symmetric, and we simply have Zi = Xi for all 
i G {1, . . . , m} and |0) l = 2~ m / 2 X^gf™ U) (unique up to a global phase). 

Given a partition P™ = {1} U Co U ■ ■ ■ U where the sets Ck are pair- 
wise disjoint and contain d — 1 commuting operators each, the eigenbases of 
the C k are mutually unbiased [4i. Let C := {XZ(a z \0)\a z G F 2 l \ {0}} be the 
non-identity Z-type operators and suppose U G Md(C) is unitary such that 
C/C fc C/t = C (fe+1) mod(d+1) for all fc G {0, . . . , d}; then, U d+1 = U° = l d , and 

the columns of U k , k G {0, . . . , d}, are the eigenbases of the Ck, i- e., E7 is the 
generator of cyclic MUBs. (In particular, U belongs to the Clifford group, i. e. 
the group of unitary operators which leave the set of Pauli operators invari- 
ant, possibly up to a p-th root of unity: £™ := {U G il{p m ) | (Va G F 2m ) 
(3b G F 2m , k G F p )(£/X£(a)E/t = u£XZ(&))}.) Thus, for all j G F™ there 
holds C/|j) = |j) L = nr=i ^(Ca! fc ) J '* |0) L , and 

u = 2 ^ m/2 Eyas- nr =1 ^(<w k>o'i- ( io ) 

With £ = (&ij)S=i as above, we have XZ(Cx k ) = X b ^) ® i b "X b "Z ® 

(0™ fc+i xb * fc )' and the fc " th tensor factor in {TDJ) is given by X 6 " il+ - +6 "^ -Z** • 
X*>k+i,kjk+iA vb mk j m ^ w bere we can shift the factor Z to the beginning, which 
yields .x b iMi+'"+ b ™M»\ By defining new abbreviations 

Pj : =iEr=i 6 **J*(-l)Er=i 6 i*J'iJ*+-"+ 6 fcfci* andXj := (g)™ =1 X 6l ^' 1+ -+ 6 ""=^, we 
find 

u = 2 - m /2J2 p j (Z^^...^Z^)X j \i){j\ ] (11) 
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we can pull through the sum over i and see that \i) is invariant under Xj, 
which thus can be absorbed. This results in U = 2~ m / 2 YlijPj(~ l) y 'l*)01 or ' 
using the Hadamard matrix H = ({ _Y)/\/2 € M 2 (C), in U = H® m P, with 
diagonal phase system matrix P = diag((£>j-)j£R»>J. Since i? is symmetric, we 
find = iO'|Bb'>iEr=i6».w* with 0'|B|j) = E™i=i & /cdu'i 

being a quadratic form, which leads to pj := iwl- B b')(—l)^«i=i 
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